Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/484067-5d7b-48a6-a99a-21c5c7963455/1/szR4SqShmdfDbHOiZe0JSyGDgcM.mft
File: szR4SqShmdfDbHOiZe0JSyGDgcM.mft (raw, json)
Hash identifier: 06L1mirmhuOxY/Ay0Ut9N2jSJ5sOKoz9jVZ4uBaOw0E=
Subject key identifier: 8F:47:C2:21:EF:6A:C2:39:09:39:3A:AA:AC:42:AE:E1:D7:51:C0:5E
Authority key identifier: B3:34:78:4A:A4:A1:99:D7:C3:6C:73:A2:65:ED:09:4B:21:83:81:C3
Certificate issuer: /CN=b334784aa4a199d7c36c73a265ed094b218381c3
Certificate serial: 0194C3F5A0B02AD2FAE1FEA399D5F9D8BD94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/szR4SqShmdfDbHOiZe0JSyGDgcM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/484067-5d7b-48a6-a99a-21c5c7963455/1/szR4SqShmdfDbHOiZe0JSyGDgcM.mft
Manifest number: 0C01
Signing time: Sun 02 Feb 2025 00:00:41 +0000
Manifest this update: Sun 02 Feb 2025 00:00:41 +0000
Manifest next update: Mon 03 Feb 2025 00:00:41 +0000
Files and hashes: 1: szR4SqShmdfDbHOiZe0JSyGDgcM.crl (hash: MT6jc1YPFLjOIIgB0WKQ5I9lNgjkzjSBc5Vaf9GrVHg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/484067-5d7b-48a6-a99a-21c5c7963455/1/szR4SqShmdfDbHOiZe0JSyGDgcM.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/484067-5d7b-48a6-a99a-21c5c7963455/1/szR4SqShmdfDbHOiZe0JSyGDgcM.mft
rsync://rpki.ripe.net/repository/DEFAULT/szR4SqShmdfDbHOiZe0JSyGDgcM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c3:f5:a0:b0:2a:d2:fa:e1:fe:a3:99:d5:f9:d8:bd:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b334784aa4a199d7c36c73a265ed094b218381c3
Validity
Not Before: Feb 2 00:00:41 2025 GMT
Not After : Feb 3 00:00:41 2025 GMT
Subject: CN=8f47c221ef6ac23909393aaaac42aee1d751c05e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:54:e9:cb:09:d3:8d:cf:a7:bd:d2:ed:40:67:
29:0a:76:a3:73:a4:52:a1:22:bb:41:03:34:cc:62:
82:1a:6b:f1:eb:c4:8c:33:05:90:3e:6f:83:80:a3:
ed:13:21:17:02:7c:1d:b4:9f:79:f3:4d:70:f9:27:
a5:2e:69:bd:f3:29:bb:72:be:67:9d:20:c0:94:a8:
1c:a4:c3:fa:3c:5a:74:17:87:fe:90:0f:c2:c0:70:
bc:58:a3:fd:8a:fa:cc:0d:e4:3a:c6:85:56:0f:16:
4a:0c:76:3a:4b:09:05:be:42:bb:e5:9c:2a:4c:43:
94:f0:c4:6b:a0:ff:cc:2e:c7:67:34:c1:85:eb:36:
b3:9c:47:6b:0f:70:f7:ff:1d:fe:bd:9b:2f:f7:3c:
8c:00:82:37:8c:4c:c4:85:be:38:f7:d6:58:80:75:
d2:e9:77:9c:7b:2a:e9:e5:ff:13:29:10:75:69:d6:
38:cb:23:ee:27:ba:4b:04:08:2d:06:98:b9:8e:d5:
0f:79:ed:3c:4f:89:c7:08:ce:d5:27:92:9c:8c:cb:
06:8a:7e:25:37:7f:d3:17:db:c1:5f:a8:4b:5f:77:
c8:36:bd:58:f3:dc:1f:c0:b8:1a:b2:11:03:4d:3b:
59:89:32:49:19:a8:06:dd:8c:81:d9:c8:ad:42:2a:
53:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:47:C2:21:EF:6A:C2:39:09:39:3A:AA:AC:42:AE:E1:D7:51:C0:5E
X509v3 Authority Key Identifier:
keyid:B3:34:78:4A:A4:A1:99:D7:C3:6C:73:A2:65:ED:09:4B:21:83:81:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/szR4SqShmdfDbHOiZe0JSyGDgcM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/484067-5d7b-48a6-a99a-21c5c7963455/1/szR4SqShmdfDbHOiZe0JSyGDgcM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/484067-5d7b-48a6-a99a-21c5c7963455/1/szR4SqShmdfDbHOiZe0JSyGDgcM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ab:69:c6:0f:71:bd:1d:48:20:5a:d7:8b:1f:90:0a:89:af:55:
66:f3:e0:a9:84:b6:0d:7c:56:d7:5e:c1:8d:b1:62:f7:f4:31:
da:8e:40:4e:fd:e7:93:b6:8b:bf:b3:27:35:95:cc:d7:e5:de:
32:fb:26:a1:57:a9:cb:7f:a8:52:c1:61:65:95:4c:d3:81:55:
52:f7:26:89:9f:89:a6:6a:d8:3f:f1:14:79:99:d5:87:d6:06:
f1:e6:91:32:c7:b7:62:3e:e4:2e:8b:0d:e4:82:c2:d2:89:f8:
0a:fc:1e:2c:33:c7:9e:be:ae:1f:b6:d1:2f:c1:0f:24:b3:3b:
fc:ee:66:ba:52:ed:65:4b:8d:63:91:37:50:5e:ac:d5:54:a4:
a8:71:ed:ba:2b:c8:c9:1d:0d:df:5d:83:fa:b7:eb:b7:44:6d:
d0:9a:08:1a:fe:f3:0e:e3:02:7c:77:e8:0e:86:21:51:91:3f:
d9:2c:12:0b:74:8a:c2:4d:48:de:eb:a9:38:dd:d5:90:3b:c5:
50:95:9c:51:00:66:2b:90:c7:31:dd:65:9e:97:2c:f4:70:6f:
3a:99:27:86:fc:13:f0:50:00:ca:98:21:5a:fb:25:89:3b:76:
38:75:ac:fd:6b:ee:51:20:72:68:94:ff:c2:d9:24:e2:05:89:
b5:1a:cb:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 07:05:36 2025 by rpki-client